The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script calculate.py contains a function compile_expression that utilizes the Python built-in compile() function with the eval mode on the expression parameter. This allows for the transformation of any string into an executable Python code object at runtime.
[COMMAND_EXECUTION]: The ability to compile arbitrary strings into code objects creates a direct pathway for arbitrary code execution (ACE). If the input expression is sourced from untrusted data or user prompts, an attacker could inject malicious Python code—such as __import__('os').system('...')—to execute system-level commands, leading to full system compromise.

expression-compiler